$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft File: J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json) Hash identifier: O/JjXr6H6WhgWfIqJy8WnaCqpy9M8xkrDTJ6nzQaPpU= Subject key identifier: 41:FB:51:79:8D:22:F6:15:C7:5D:51:DE:A7:D4:E9:2A:53:54:BE:15 Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 Certificate issuer: /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Certificate serial: 0A85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft Manifest number: 0A7A Signing time: Fri 22 Aug 2025 19:45:31 +0000 Manifest this update: Fri 22 Aug 2025 19:45:31 +0000 Manifest next update: Fri 29 Aug 2025 19:45:31 +0000 Files and hashes: 1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: zbvEjt5stS9q7K4bzRnxfVcqnvF+jWFhVv5RgujTp20=) 2: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: 8qV4xNEzC9YwAyrCmGEDqkkT1vswlJKt6VLA8n7jDac=) 3: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: nsJgzUwSSMXcZYSBnW8T1s1Gr6R7nDs7M70WL4KuFGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2693 (0xa85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0 Validity Not Before: Aug 22 19:45:31 2025 GMT Not After : Aug 29 19:45:31 2025 GMT Subject: CN=68a8c8db-3702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:5f:21:63:90:a0:d1:d3:4a:c9:2d:e3:2d: 9b:65:1f:d6:14:d9:dd:96:e2:0e:68:7b:17:07:dc: 61:f6:fd:fd:3f:49:2e:b3:0a:d1:98:b6:cd:6a:43: f2:43:6a:e0:13:96:a7:cb:5f:0b:25:af:7d:95:3f: 4a:78:d7:8b:3a:17:f6:8e:46:98:9a:03:8b:a3:fd: 11:dd:79:20:f0:21:11:70:6a:94:30:9f:36:6f:03: 93:fc:33:78:cf:a8:3d:98:32:62:4f:8b:99:f0:c0: 95:96:7a:94:50:23:43:a5:a9:42:8c:86:24:8c:3a: 00:42:41:f3:28:66:84:c1:74:85:5a:d4:00:a7:f2: c6:d3:bf:fb:25:00:c0:a5:52:9e:3f:c6:a2:2b:24: a3:de:8e:8b:bd:3e:58:11:ed:7f:8e:e3:77:d6:3e: 85:38:f8:3f:41:40:7f:ff:93:fe:7c:81:6a:6a:ff: c2:b5:e1:c3:aa:41:c7:95:0e:35:98:21:b4:e5:c0: 76:eb:cf:49:67:d5:58:81:1a:67:5c:cf:07:04:d4: 6c:25:29:cd:d7:2f:93:38:91:0b:30:37:9b:cc:ce: 13:92:d4:bc:d2:7a:b9:e7:45:97:8b:18:46:13:f6: f1:2d:47:9c:6d:0f:e0:37:74:66:e3:8c:2a:63:d9: 1a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:51:79:8D:22:F6:15:C7:5D:51:DE:A7:D4:E9:2A:53:54:BE:15 X509v3 Authority Key Identifier: keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d6:05:4f:bc:0a:62:61:dd:a6:3c:bb:14:52:59:94:61:08: ed:4b:b5:6c:be:3b:5e:a5:f3:fe:5b:8e:d3:6f:ce:c7:f9:ad: 8f:b9:4a:63:ca:1d:b1:2c:66:9d:4a:e7:dd:4c:ab:18:35:4e: c5:04:a0:83:67:0b:0a:ae:9b:07:c8:88:bb:25:e9:af:b3:5b: df:83:38:64:7d:5f:b4:66:64:6a:33:8c:c6:14:88:bd:ec:03: 2e:c8:25:a0:1b:31:78:50:1b:e0:e2:c1:57:fa:43:73:a6:ce: f4:6c:e0:9d:b9:49:6c:6c:1b:18:42:56:9e:3d:e9:62:f9:da: 3e:6a:e2:33:b2:b3:c5:50:3a:73:51:91:db:41:d1:53:d9:ca: 07:fe:68:23:b2:22:14:80:82:4e:22:46:0e:60:e4:1c:12:2d: 51:a2:d2:28:29:df:cc:c3:84:22:bc:b2:f9:8c:df:a9:91:ae: 0d:8a:08:c7:cb:46:a1:0b:f9:42:ff:fc:8a:79:a5:93:38:da: 89:e8:fc:8d:e5:93:b4:73:10:15:7a:1d:ee:fd:3e:f5:7b:9d: c5:8c:aa:0a:5f:e9:f5:c7:69:be:63:ba:95:4d:8a:01:34:b8: c5:ad:b0:3f:59:67:f7:a7:0a:16:85:ad:db:ac:13:a9:ce:67: 14:ea:ea:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBCRUMxMTAvBgNVBAUTKDI3N0Y2ODYyNjg0MDcyQjYyQTE1NkRERjc1REQ3NzI1 QzM4RjUxRDAwHhcNMjUwODIyMTk0NTMxWhcNMjUwODI5MTk0NTMxWjAYMRYwFAYD VQQDEw02OGE4YzhkYi0zNzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzStfIWOQoNHTSskt4y2bZR/WFNndluIOaHsXB9xh9v39P0kuswrRmLbNakPy Q2rgE5any18LJa99lT9KeNeLOhf2jkaYmgOLo/0R3Xkg8CERcGqUMJ82bwOT/DN4 z6g9mDJiT4uZ8MCVlnqUUCNDpalCjIYkjDoAQkHzKGaEwXSFWtQAp/LG07/7JQDA pVKeP8aiKySj3o6LvT5YEe1/juN31j6FOPg/QUB//5P+fIFqav/CteHDqkHHlQ41 mCG05cB2689JZ9VYgRpnXM8HBNRsJSnN1y+TOJELMDebzM4TktS80nq550WXixhG E/bxLUecbQ/gN3Rm44wqY9ka5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEH7UXmN IvYVx11R3qfU6SpTVL4VMB8GA1UdIwQYMBaAFCd/aGJoQHK2KhVt33XddyXDj1HQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEJFQy83QjdGMjhFMjY3 N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNyWXFGVzNmZGQxM0pjT1BV ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozOW9ZbWhBY3JZcUZXM2ZkZDEzSmNPUFVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEJFQy83QjdGMjhFMjY3N0UxMUVBOEJEODI2MkRDNEY5QUUwMi9KMzlvWW1oQWNy WXFGVzNmZGQxM0pjT1BVZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS1gVPvApiYd2mPLsUUlmUYQjtS7VsvjtepfP+W47Tb87H+a2PuUpj yh2xLGadSufdTKsYNU7FBKCDZwsKrpsHyIi7Jemvs1vfgzhkfV+0ZmRqM4zGFIi9 7AMuyCWgGzF4UBvg4sFX+kNzps70bOCduUlsbBsYQlaePeli+do+auIzsrPFUDpz UZHbQdFT2coH/mgjsiIUgIJOIkYOYOQcEi1RotIoKd/Mw4QivLL5jN+pka4NigjH y0ahC/lC//yKeaWTONqJ6PyN5ZO0cxAVeh3u/T71e53FjKoKX+n1x2m+Y7qVTYoB NLjFrbA/WWf3pwoWha3brBOpzmcU6uqc -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:12 2025 by rpki-client